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(m) Descrambler subscriber key production system utilizing key seeds stored in descrambler. 
@ A system for reproducing in a descrambler of a subscri- 
ber communication networtc a subscriber key signal that Is 
unique to the descrambler and was used in encrypting a key 
signal that must be decrypted for use in descrambling a 
signal received by the descrambler. The scrambled signal is 
received by the descrambler together with the encrypted key 
signal and a key generation number containing an address 
for accessing a predetermined area in a memory contained 
in the descrambler. The system includes a circuit for 
providing a subscriber key generation signal that is unique to 
the descrambler: a subscriber key generator for reproducing 
the unique subscriber key signal by processing the subscri- 
ber key generation signal in accordance with a predeter- 
mined encryption algorithm upon the algorithm being keyed 
by a prescribed subscriber key seed signal that is unique to 
the descrambler: a secure memory storing a plurality of 
different subscriber key seed signals, and for providing the 
prescribed seed signal to key the algorithm when the area of 
the memory containing the prescribed seed signal is acces- 
sed by the address conteined in the received key generation 
number; and a circuit for accessing the first memory with the 
eddress contained in the received key generation number. 
The subscriber key generation signal is formed by combining 
the received key generation number with a unique subscri- 
ber eddress signal that is stored in a second memory of the 
descrambler. 
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DESCRAMBLER SUBSCRIBER KEY PRODUCTIOH 
SYSTEM UTILIZING KEY SEEDS STORED IN DESCRAMBLER 



The present invention generally pertains to 
comniunication signal scrambling and descrambling systems 
utilizing encryption technology and is particularly 
directed to a system for reproducing in a descrambler a key 
signal that is unique to the descrambler and was used in 
encrypting a key signal that must be decrypted for use in 
descrambling a signal received by the descrambler. 

in the prior art the unique key signal that is used in 
encrypting the key signal that must be decrypted is stored 
in a memory contained in the descrambler and is accessed 
from the memory for use in decrypting a received encrypted 
-key signal intended for the descrambler. Typically a 
person in possession of th« descrambler could ascertain 
the unique key signal by reading it from the memory. The 
fact that the unique key signal could be ascertained by a 
possessor of a descrambler presented a significant problem 
when it vas proposed by the applicants of cross-referenced 
Application No. 84303320.0 to use key signal encryption 
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techniques for controlling the distribution o£ scrambled 
television signals to subscriber of a television 
Buscription service. Although only the unique key signals 
of paid-up subscribers would be used in controlling such 
distributiour it was apparent that if a paid-up subscriber 
could ascertain his unique subscriber key signal stored in 
the memory of his descr ambler, such unique subscriber key 
signal could then be stored in the memory of unauthorized 
descramblers to enable pirating of the scrambled television 
signals. 

One solution to this problem suggested by the 
applicants of Application Ho.84303320.0 was to use a secure 
memory in each descr ambler for storing the subscriber key 
signal that is unique to the descr ambler. A secure memory 
is an internal read only memory (ROM) in an integrated 
circuit microprocessor chip having internal architecture 
that prohibits the ROM from being read off chip. The 
secure memory approach provides a high level of security 
against a person in possession of a descr ambler 
ascertaining the unique subscriber key signal for such 
descr ambler. 

It is an object of the present invention to so 
complicate the reproduction of the unique subscriber key 
signal in the descrambler as to further lessen the 
probability of unauthorized ascertainment and use of such 
key signal. 

It is a further object of the present invention to so 
complicate the reproduction of the subscriber key signal in 
such a manner as to make it practical for a plurality of 
broadcasters utilizing a common subscriber communication 
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network to use subscriber key signals that are unique to 

both the individual subscriber and the individual 

broadcasters. 

SUMMARY OF THE INVENTION 

The present invention is a system for reproducing in a 
descrambler a subscriber key signal that is unique to the 
descrambler and was used in encrypting a key signal that 
must be decrypted for use in descr ambling a signal received 
by the descrambler. In accordance with the present 
invention the scrambled signal is received by the 
descrambler together with the encrypted key signal, a key 
generation number and an pddress for accessing a 
predetermined area in a memory contained in the 
descrambler. The statement that the scrambled signal is 
received together with the encrypted key signal and the key 
generation number does not necessarily mean that these 
signals are received together temporarily, but rather that 
all are received by the descrambler. In fact, the 
encrypted key signal for use in descrambling a given 
scrambled signal typically is transmitted to and received 
by the descrambler prior to the transmission and receipt of 
the given scrambled signal. The system of the present 
invention includes means for providing a subscriber key 
generation signal that is unique to the descrambler; a 
subscriber . - key generator for reproducing the unique 
subscriber key signal by processing the subscriber key 
generation signal in accordance with a predetermined 
encryption algorithm upon the algorithm being keyed by a 
prescribed subscriber key seed signal that is unique to the 
descr ambl en a first memory storing the prescribed 
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subscriber key seed signal, and for providing the 
prescribed seed signal to key the algorithm when the area 
of . the memory containing the prescribed seed signal is 
accessed by the address received with the received key 
generation number; and means for accessing the first memory 
with the address received with the received key generation 
number. Preferably r the first memory is a secure memory. 

The system of the present invention is particularly 
useful in a subscriber communication network, in which a 
common key signal is uniquely encrypted for each of a 
plurality of subscribers and must be decrypted by the use 
of a subscriber key signal that is unique for each 
subscriber for use in descrambling the scrambled signal. 

Tflie system of the present invention also is 
pacticularly useful in a subscriber communication network 
in which a common key signal is uniguely encrypted for a 
^subscriber by a plurality of different scrambled signal 
broadcasters and must be decrypted by using a subscriber 
key signal that is unique to both the subscriber and the 
broadcaster for use in descrambling the scrambled signal 
and wherein the subscriber has a descrambler for uniquely 
descrambling the scrambled signals from a given one of the 
broadcasters by .using the subscriber key signal that is 
unique to the given broadcaster to decrypt the uniquely 
encrypted key signal. 

Preferably, the first memory stores a plurality of 
different subscriber key seed signals, with the prescribed 
one of the seed signals being provided to key the algorithm 
in accordance with the address received with the received 
key generation number. Should a list of subscriber key 
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signals currently used by a given broadcaster become known, 
the broadcaster can either change the key generation number 
or change the address to thereby access a different 
subscriber key seed signal from the first memory of each 
descrambler in the subscriber network, whereupon a 
completely different list of subscriber key signals would 
be applicable for the network. 

To further complicate the system, the preferred 
embodiment of the means in the descrambler for providing 
the subscriber key generation signal includes a second 
memory storing a subscriber address signal that is unique 
to the descrambler; and a circuit for combining the stored 
subscriber address signal and the received key generation 
number to provide the subscriber key generation signal. 
This technique enables the key generation number to be 
unique for different broadcasters ^that utilize a common 
subscriber communication network so that different unique 
subscriber key signals are reproduced in a given 
descrambler for use in respectively descr ambling the 
scrambled signals broadcast by the different broadcasters; 
and further enables each broadcaster to broadcast a common 
key generation number to common groups of its subscribers. 

Additional features of the present invention are 
described with reference to the description of the 
preferred embodiments. 
BRIEF DESCRIPTION OF THE DRAWING 

Figure . 1 is a functional block diagram of a 
descrambler utilizing the system of the present invention. 

Figure 2 is a functional block diagram of one 
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preferred embodiment of the subscriber key reproduction 
system of the present invention. 

Figure 3 is a functional block diagram of an 
alternative preferred embodiment of the subscriber key 
reproduction system of the present invention. 

Figure 4 is a functional block diagram of another 
alternative preferred embodiment of the subscriber key 
reproduction system of the present invention. 
DESCRIPTION OF THE PREFERRED EMBODIMENTS 

The preferred embodiment of the subscriber key 
reproduction system of the present invention are useful in 
the descr ambler described in the 

Patent Application No. 84303320.0 the detailed disclosure of 
vhich is incorporated herein by reference. Common 
reference numerals are used to refer to elements that are 
described in both Application No. 84303320-0 and the present 
specification. 

In the scrambler portion of the overall scrambling and 
descr ambling system described in Application No. 84303320.0 
the television signal is scrambled by processing the video 
and audio portions thereof with a key stream that is 
generated by a scrambler key distribution system. The 
scrambler key distribution system generates the keystream 
in accordance with the Data Encryption Standard (DBS) 
algorithm upon the algorithm being keyed by a channel key 
signal that is provided by a control computer. The channel 
key signal must be used in the descr ambler for descr ambling 
the television signal. To prevent unauthorized 

descr ambling of the television signal^ the channel key 
signal is encrypted in accordance with the DES algorithm 
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upon the algorithm being keyed by a category key signal 
that is coiniDon to a group of Bub&criberB authorized to 
descraiQble the scrambled television signal. The encrypted 
channel key signal is inserted in the scrambled television 
signal by the scrambler signal processor and broadcast 
therewith to the descr amblers in the subscriber network. 

The category key signal also is encrypted. Moreover, 
the category key is uniquely encrypted in accordance with 
the DEE algorithin upon the algorithm being keyed by each of 
a group of subscriber key signals that respectively are 
unique to the different descramblers in the subscriber 
network* The uniquely encrypted category key signals are 
addressed to their respective descramblers and inserted in 
the scrambled television signal by the scrambler signal 
processor for broadcast therewith to the respective 
descramblers in the subscriber network. 

A listing of the unique subscriber key signals is 
maintained so as not to be accessible except by the 
scrambler key distribution system. Should this listing be 
compromised by unauthorized access a new listing of 
subscriber key signals must be provided and utilized. The 
control computer also provides to the scrambler signal 
processor a system key generation number that is unique to 
the broadcaster and the system key generation number is 
likewise inserted into the scrambled television signal for 
transmission therewith to all of the subscribers. The 
scrambler signal processor further inserts into the 
scrambled television signal an initialization vector (IV) 
frame count signal and process control signals provided by 
the control computer. A detailed description of the 
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scrambler is provided in Application No. 84303320.0. 

In each descrambler in order to deecramble the 
scrambled television signal, the keystrjBam used to 
scramble the television signal must be reproduced. In 
5 order to reproduce the keystream in the descrambler, the 
encrypted channel key signal must be decrypted to reproduce 
the channel key signal that was used to generate the 
keystream in the scrambler. In order to decrypt the 
encrypted channel key signal in a given descrambler, the 

10 unique encrypted category key addressed to the given 
descrambler must be decrypted to reproduce the category key 
signal that was used to encrypt the channel key signal in 
the scrambler. In order to decrypt the uniquely encrypted 
category key signal in a given descrambler, the unique 

15 subscriber key signal used for encrypting the category key 
signal in the scrambler must be reproduced in the 
descr ambler. 

Referring to Figure 1, the descrambler includes a 
descrambler signal processor 150 and a descrambler key 

20 distribution system 151. 

The descrambler signal processor I50 receives the 
scrambled television signal on line 152. From the received 
scrambled television signal on line 152, the descrambler 
signal processor separates and provide to the descrambler 

25 key distribution system 151, the IV frame count signal (not 
shown) , the encrypted channel and encrypted category key 
signals on lines 156, the subscriber key generation number 
on line 157 and various process control signals on line 158 
that are related to the operation of the descrambler key 

30 distribution system 151. 
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OAie descrambler key distribution system 151 responds 
to. these signsds xeceived on lines 153-158 from the signal 
processor by reproducing the unique keystrearo used to 
scramble the video and audio components of the scrambled 
5 television signal received on line 152 and provides the 
unique keystream to the descrambler signal processor on 
line 159. 

The descrambler signal processor 150 descrambles the 
scrambled television signal on line 152 in accordance with 

10 the unique keystream received on line 159 to provide a 
descrambled video signal on line 160 and a descrambled 
audio signal on line 161. 

Referring to Figure 2, one preferred embodiment of the 
subscriber key reproduction system for use in the 

15 descrambler key distribution system 151 (Figure 1) includes 
a secure subscriber key seed memwy 163 storing four 
subscriber key seed signals, a subscriber address memory 
164 storing a subscriber address signal that is unique to 
the descrambler and a subscriber key signal generator 165. 

20 !rhe memory 163 is addressed via line 298 by two bits 

included in a given position of a 32-bit system key 
generation number received on line 157 to provide one of 
the four stored unique subscriber 56-bit key seed signals 
on line 179. 

25 A 32-bit unique subscriber address signal stored in 

the memory 164 is combined with the 32-blt system key 
generation number received on line 157 to provide a 64-bit 
subscriber key generation signal on line 180. 

30 The subscriber key generator 165 generates a unique 
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64-bit subBcriber key signal on line 181 by processing the 
subscriber key generation signal on line 180 in accordance 
with the DES encryption algorithm upon the DES algorithm 
being keyed by the unique subscriber key seed signal on 
line 179* Eight bits of the unique subscriber key signal on 
line 181 are removed by a truncation function element 166 
to reproduce the unique 56-bit subscriber key signal that 
was used in the scrambler to key the generation of the 
uniquely encrypted category key signal addressed to the 
de scrambler. 

Since the content of the subscriber key signal 
generated on line 181 by the subscriber key generator 165 
depends upon the content of the subscriber key seed signal 
retrieved on line 179 from the secure memory 163 it is 
essential that the two address bits in the system key 
generation number address the location in the secure memory 
163 containing the subscriber key seed signal that will key 
~ generation of a unique subscriber key signal identical to 
the one used in the scrambler to key the generation of the 
uniquely encrypted category key signal addressed to the 
de scrambler. 

The descr ambler key distribution system further 
includes a category key generator 167 • When the category 
key generator 167 receives a unique encrypted category 
signal addressed thereto on line 156 and the unique 
subscriber key signal is reproduced on line 182, the 
category key generator 167 generates a decrypted 64-bit 
category key signal on line 183 by processing the encrypted 
category key signal received on line 156 in accordance with 
the DES encryption algorithm upon the DES algorithm being 
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keyed by the unique subscriber key signal on line 182. The 
remainder oj^ the descranbler key distribution system 151 is 
described in Application No. 84303320.0. 

With the exception of the key stream generator (not 
shown) t the components of the scrambler key distribution 
system 151 (Figure 1) are all contained on a single 
microprocessor chip, which is preferably a special version 
of the Intel 8751 Single-Component 8-Bit Microcomputer. 
The secure memory 163 is in the internal EPROH of this 
chip. An alternative to the Intel 8751 is a combination of 
Texas Instruments' TMS7041 and TMS70C40 microcomputers 
which provides a similar capability. The Intel "8751" chip 
is a Btand-alo)je^ high-performance * single-chip computer 
fabricated with HMOS technology and packaged in a 40-pin 
DIP. It provides the hardware features^ architectural 
enhancements and instruction set necessary to make it an 
errective controller in this cryptographic application. 
The EPROM in this special version of the 8751 chip contains 
4K bytes of UV erasable read only memory which is only 
readable on-chip. The architecture does not provide any 
direct path from the EPROM to outside the chip once the 
external verify mode has been disabled in the manufacturing 
process by blowing the "verify mode" fuse. All the 
firmware that performs the generation and storage of the 
key signals is contained in this EPROM area. The 
extreme difficulty of reading the program stored in the 
secure EPRCW of the 8751 chip also makes it much more 
difficult for a pirate to make use of lists of subscriber 
key signals and subscriber addresses, even if he should 
succeed in breaking the security system of the control 
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computer to obtain the lists. If a pirate knows a valid 
subscriber key signal ,^ he must also know the entire program 
content so that he can store the valid subscriber key 
signal seed and subscriber address in the memory. This 
would be exceedingly difficult to do without a complete 
program listing, which is protected by the manufacturers' 
security procedures. 

In the preferred embodiments shown in Figures 3 and 4 
reproduction of the unique subscriber key signal is further 
complicated by utilizing two different key seed signals. 

The embodiment of Figure 3 includes the subscriber key 
seed memory 163, the subscriber address memory 164 and the 
subscriber key generator 165 which are included in the 
embodiment of Figure 2, and further includes a second key 
generator 300* 

The memory 163 is addressed v^a line 298 by two bits 
included in a first given position of the 32-bifc system key 
generation number received on line 157 to provide a first 
prescribed one of the four stored unique subscriber 56-bit 
key seed signals on line 179, and is further addressed by 
two bits included in a second given position of the system 
key generation number received on line 157 to provide a 
second and different prescribed one of the four stored 
unique subscriber key seed signals on line 301. 

The 32-bit unique subscriber address signal stored in 
the memory 164 is combined with the 32-bit subscriber key 
generation number received on line 157 to provide a 64-bit 
second key generation signal on line 302. 

The second key generator 300 generates a unique 64-bit 
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subscriber key generation signal on line 303 by processing 
the second key generation signal on line 302 in accordance 
with the DES encryption algorithm upon the DES algorithm 
being keyed by the second prescribed unique subscriber key 
seed signal on line 301. 

The subscriber key generator 165 generates a unique 
64-bit subscriber key signal on line 181 by processing the 
subscriber key generation signal on line 303 in accordance 
with the DES encryption algorithm upon the DES algorithm 
being keyed by the first prescribed unique subscriber key 
seed signal on line 179, Eight bits of the unique 
subscriber key signal on line 181 are removed by a 
truncation function element 166 to provide a unique 56-bit 
subscriber key signal on line 182 identical to the unique 
subscriber key signal that was used in the scrambler to key 
the generation of the uniquely encrypted category key 
signal addressed to the descrambler. In all other aspects 
the system of Figure 3 is the same as the system of Figure 
2. 

The embodiment of Figure 4 includes the subscriber key 
seed memory 163, the subscriber address memory 164, the 
subscriber key generator 165 and the second key generator 
300 which are included in the embodiment of Figure 3, and 
further includes a third key generator 305. 

The memory 163 is addressed via line 298 by two bits 
included in a first given position of the 32-bit system key 
generation number received on line 157 to provide a first 
prescribed one of the four stored unique subscriber 56-bit 
key seed signals on line 179, and is further addressed by 
two bits included in a second given position of the system 
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key generation number received on line 157 to provide a 
second and different prescribed one of the four stored 
unique subscriber key seed signals on line 301, 

The 32-bit unique subscriber address signal stored in 
the memory 164 is combined with the 32-bit subscriber key 
generation number received on line 157 to provide a 64-bit 
third key generation signal on line 306. 

The third key generator 305 generates a unique 64-bit 
second key generation signal on line 307 by processing the 
third key generation signal on line 306 in accordance with 
the DES encryption algorithm upon the DES algorithm being 
keyed by. the first prescribed unique subscriber key seed 
signal on line 179, 

The second key generator 300 generates a unique 64-bit 
subscriber key generation signal on line 303 by processing 
the second key generation signal on line 307 in accordance 
with the DES encryption algorithm upon the DES algorithm 
being keyed by the second prescribed unique subscriber key 
seed signal on line 301* - 

The subscriber key generator 165 generates a unique 
64-bit subscriber key signal on line 181 by processing the 
subscriber key generation signal on line 303 in accordance 
with the DES encryption algorithm upon the DES algorithm 
being keyed by the first prescribed unique subscriber key 
seedsignal on line 179. Eight bits of the unique 
subscriber key signal on line 181 are removed by a 
truncation function element 166 to provide a unique 56-bit 
subscriber key signal on line 182 identical to the unique 
subscriber key signal that was used in the scrambler to key 
the generation of the uniquely encrypted category key 
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signal addressed to the descrambler . In all other aspects 
the system of Figure 4 is the same as the system o£ Figure 
2. 

From the foregoing it is apparent that the subscriber 
key reproduction system of the present invention has 
several advantageous features. 

One feature is that the unique subscriber key signal 
that is reproduced can be changed simply by changing the 
system key generation number that is provided by the 
control computer of the scrambler and inserted in the 
scrambled signal for broadcast therewith to the 
descrambler. 

Another feature is that different sets of unique 
subscriber key signals for a given subscriber communication 
network can be generated for use by different broadcasters, 
whereby scrambled signals from different broadcasters can 
be uniquely descr ambled by the same descrambler. 
Accordingly, each broadcaster using the system can be 
provided with its own independent listing of unique 
subscriber key signals without compromising the 
confidentiality of the listings of the other broadcaster. 

An additional feature is that storage of a plurality 
of different key seed signals in the memory of the 
descrambler provides a backup in the event that one listing 
of key seed signals accessed by a common address in the 
system key generation number should become compromised. To 
exploit this advantage the listings corresponding to the 
different addresses must be secretly stored in separate 
locations. 

A further feature is that only one of listings of 
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commonly addreBBed key seed signals need be removed from 
such secret storage at a time in order to generate a new 
listing of unique subscriber key signals for the subscriber 
network, thereby reducing the possibility of compromising 
the security of the entire network during such generation 
process. 

Although the preferred embodiments of the system of 
the present invention are described herein for use in a 
subscriber television network, the system of the present 
invention is applicable to and useful in other types of 
subscriber communications networks, such as for example, a 
subscriber telephone network. In a subscriber telephone 
network, each subscriber is in essence a broadcaster and 
has both a scrambler and a descrambler. Accordingly, each 
subscriber would be provided with its own unique listing of 
unique subscriber key numbers for eqabling it to broadcast 
to the descramblers of the other subscribers of the 
network, and would also be provided with a correlated 
system key generation number that would be broadcast in 
common to all of the other subscribers in the network. 
Should one subscriber's listing of unique subscriber key 
signals become compromised, the listings of the other 
subscribers would not likewise be compromised and the one 
subscriber simply could be provided with a new listing and 
a, new correlated system key generation number. 

The system of the present invention likewise is useful 
with a subscriber computer interface network in the same 
manner as with the subscriber telephone network described 
above. 



CLAIMS 01 55 762 

1. A system for reproducing in a descrambler a 
2 subscriber key signal that is unique to the descrambler and 

was used in encrypting a key signal that must be decrypted 
4 for use in descrambling a signal received by the descrambler, 

wherein the scrambled signal is received by the descrambler 
6 together with the encrypted key signal, a key generation 

number and an address for accessing a predetermined area in 
B a memory contained in the descrambler, the system comprising 

means for providing a subscriber key generation signal 
10 that is unique to the descrambler? 

a subscriber key generator for reproducing said unique 
12 subscriber key signal by processing the subscriber key 

generation signal in accordance with a predetermined 
14 encryption algorithm upon said algorithm being keyed by a 

prescribed subscriber key seed signal that is unique to the 
16 descrambler; 

a first memory storing the prescribed subscriber key seed 
18 signal, and for providing the prescribed seed signal to key 

the algorithm when the area of the memory containing the 
20 prescribed seed signal is accessed by the address received 

with the received key generation number; and 
22 means for accessing the first memory with the address 

received with the received key generation number. 
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2. A system according to Claim 1, wherein the first memory 
stores* a plurality of different subscriber key seed signals, _ 
with the prescribed one of said seed signals being provided 
to key the algorithm in accordance with the address received 
with the received key generation number • 

3. A system according to Claims 1 or 2, wherein the first 
memory is a secure memory, 

A. A system according to Claims 1,2 or 3, wherein the means 
for providing the subscriber key generation signal comprises 

a second memory storing a subscriber address signal that 
is unique to the descrambler; and 

means for combining the stored subscriber address signal 
and the received key generation number to provide the 
subscriber key generation signal. 

5. A system according to Claims 1, 2 or 3, 

wherein the means for providing the subscriber key 
generation signal comprises a second key generator for 
producing the subscriber key generation signal by processing 
a signal derived from a signal containing a subscriber 
address that is unique to the descrambler in accordance with 
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a second predetermined encryption algorithm upon said second 
algorithm being keyed by a second prescribed key seed signal 
that is unique to the descrambler; and 

wherein the first memory also stores the second 
prescribed seed signal and provides the second prescribed 
seed signal to key the second algorithm when the area of the 
first memory containing the second prescribed seed signal 
also is accessed by the address received with the received 
key generation number. 

6, A system according to Claim 5, wherein the means for 
providing the subscriber key generation signal further 
comprises 

a second memory storing a subscriber address signal that 
is unique to the descrambler; and 

means for combining the stored subscriber address signal 
and the received key generation number to provide said 
subscriber address containing signal. 

7. A system according to Claim 6, 

wherein the means for providing the subscriber key 
generation signal further comprises a third key generator for 
producing said signal derived from said subscriber address 
containing signal by processing said subscriber address 
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6 containing signal in accordance with a third predetennined 
encryption algorithm upon said third algorithm being keyed by 
8 a prescribed key seed signal that is stored in the first 
memory and is unique to the descrambler; and 
10 wherein the first memory provides the prescribed key seed 

signal for keying the third algorithm when the area of the 
12 first memory containing said seed signal for keying the third 
algorithm is accessed by the address received with the 
14 received key generation number. 

8. A system according to Claim 7, wherein the same 
2 prescribed key seed signal is provided by the the first 
memory for keying two of the algorithms* 
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